This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft
File:                     fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft (raw, json)
Hash identifier:          C/XzakmAep0uYHjRDoZOnM+KFIZQqA+PBYCTBSc7GNo=
Subject key identifier:   C6:70:6F:1E:6C:92:C4:A9:69:63:F9:FB:E5:90:48:E1:3F:1D:CD:FC
Authority key identifier: 7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04
Certificate issuer:       /CN=A911ABF4/serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04
Certificate serial:       0F98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft
Manifest number:          1941
Signing time:             Sat 06 Dec 2025 17:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 17:01:09 +0000
Manifest next update:     Sat 13 Dec 2025 17:01:09 +0000
Files and hashes:         1: fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl (hash: QAs3Jp+Wx8q5aR6svtxWGg4fKyPVV1PZeftmpi6BzrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl
                          rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3992 (0xf98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABF4, serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04
        Validity
            Not Before: Dec  6 17:01:09 2025 GMT
            Not After : Dec 13 17:01:09 2025 GMT
        Subject: CN=69346155-d2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:11:38:49:79:4c:45:08:f6:0d:7c:2c:b3:
                    fe:72:ad:02:54:f5:21:ec:1e:34:1c:85:62:63:81:
                    b1:31:db:e1:0e:38:cf:16:f0:c7:41:1e:91:60:7a:
                    a1:df:5d:e0:b6:fd:fd:78:c2:cf:1f:a3:ab:a7:fd:
                    7b:e4:24:a8:74:a0:9d:ce:8b:62:23:22:77:c8:92:
                    a7:d5:c3:34:81:7a:64:0e:dc:bd:da:27:f2:06:47:
                    1c:95:2a:81:bb:b5:30:7e:3e:f9:dc:45:0c:e1:46:
                    c5:09:85:a3:cc:6a:8c:49:be:27:6d:3c:8b:59:91:
                    14:05:00:3f:50:55:83:93:e5:5c:11:70:bf:85:c0:
                    81:7d:71:22:6d:8d:7e:1d:d3:0a:9d:ce:7f:bf:f0:
                    fe:45:54:21:a8:26:b4:41:29:e9:bb:ad:cf:f2:52:
                    c0:75:e0:81:17:11:38:ce:d1:55:4a:48:3b:16:3f:
                    30:3b:07:fe:d2:91:9c:da:50:6f:c4:75:e0:89:4e:
                    3e:13:fc:bc:5e:8c:4b:bd:e2:27:5e:52:8d:b0:e4:
                    4d:22:82:26:ff:71:91:5c:31:1d:14:33:51:19:8f:
                    20:99:10:38:71:fb:81:54:e1:95:8a:42:1b:3a:9d:
                    92:9d:70:8f:b2:ad:63:00:11:23:d0:bd:14:6d:b1:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:70:6F:1E:6C:92:C4:A9:69:63:F9:FB:E5:90:48:E1:3F:1D:CD:FC
            X509v3 Authority Key Identifier:
                keyid:7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d4:79:4a:46:13:6f:e5:3b:50:6a:7d:34:1c:ba:0d:b0:ab:
         4d:c8:b9:df:3f:3a:dc:2b:ae:05:52:f3:09:82:37:6c:7c:1b:
         12:db:83:f3:25:fd:fb:4c:2c:9e:e7:82:5d:a7:00:bb:53:05:
         29:73:48:ce:7c:95:9e:5b:04:3d:8f:3a:77:af:61:67:1a:81:
         26:ac:d3:8c:b2:a4:9c:12:98:f6:97:87:66:31:51:c4:43:87:
         07:2d:fb:12:3c:84:5f:72:49:d5:17:3d:55:9a:fe:c4:d6:d5:
         2a:53:cb:af:51:89:5e:db:66:d1:43:2b:f2:9a:5c:20:ed:86:
         a3:c2:b9:21:0b:e4:a3:26:4b:96:a0:ff:2a:64:ac:09:0b:57:
         9b:ce:b0:8e:c1:3e:92:8f:01:f8:e6:18:06:0f:d7:ac:82:72:
         97:c4:62:18:f4:8b:87:9f:38:85:be:68:6f:c1:5f:0b:74:f0:
         90:30:8b:5f:5c:f4:44:92:ea:7f:39:99:b0:66:4a:ba:23:bc:
         86:26:18:bc:07:e8:ab:79:1b:6d:64:66:b6:20:64:5c:6b:52:
         37:9e:91:c0:4d:ba:cd:63:43:44:39:73:68:95:42:4d:79:57:
         cd:09:54:93:11:f1:ee:73:ad:f7:50:4c:ca:1d:5e:11:d9:b8:
         39:b6:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:30 2025 by rpki-client